Privacy Policy

We process account email and password hash; answers supplied to a questionnaire; generated document text; delivery email; transaction, consent, template and integrity records; and limited request/security logs. PayPal processes payment credentials and gives us order and capture information. Do not provide information that is unnecessary for the draft.

We use questionnaire answers to create a requested preview and deliver a purchased document, relying on steps at your request before a contract and performance of the contract. We retain transaction and consent evidence for legal obligations and establishment or defence of claims. We use limited security logs and rate limiting for our legitimate interest in protecting the service.

We use the OpenAI API—not the consumer ChatGPT service—to turn questionnaire answers into a first draft. OpenAI states that business data submitted through its API is not used to train its models by default unless the customer explicitly opts in. UKDocs AI has not claimed or enabled Zero Data Retention. Under standard API data controls, OpenAI may retain abuse-monitoring data for up to 30 days. OpenAI's locations, subprocessors and transfer safeguards are assessed separately from our database location.

The primary Supabase database region is not available in this deployment's configuration. No location claim is made until SUPABASE_REGION is set to the region of the connected project.

• Supabase provides the PostgreSQL database and, if configured, private file storage.
• OpenAI provides the API used to generate first drafts from submitted answers.
• PayPal creates and captures payment orders.
• Resend sends purchase and document-delivery email.
• Vercel hosts and runs the production web application and scheduled deletion endpoint, and provides Vercel Web Analytics, which records page views without cookies.
• Google receives Google Analytics page-view data and Google Ads conversion events, and only where you have accepted non-essential cookies.

Google Analytics and Google Ads code is loaded only after you accept non-essential cookies. Until you accept, and if you decline, no Google code is loaded and no analytics or advertising cookies are set. Some processor activity may take place outside the UK. We do not claim that there are no international transfers. Each provider, location, subprocessor and applicable safeguard must match the live production configuration.

New substantive questionnaire and generated-document content receives an expiry timestamp 14 days after creation. It is then scheduled for automatic deletion, which may take up to 24 hours to complete. As a cautious transition, records created before this expiry control was introduced are scheduled 30 days after creation; an unexpected legacy record without an expiry also uses that 30-day fallback. The daily job removes eligible content from UKDocs AI-controlled active database records and configured file storage unless a narrowly scoped legal hold applies. Purchase amount, payment identifiers, consent wording/version and other minimum transaction evidence may remain, but the completed document is removed. This schedule does not shorten OpenAI's separate standard abuse-monitoring retention of up to 30 days or a provider's backup and security-log cycle. Residual backup copies may remain inaccessible until overwritten, and tax, accounting, fraud, complaint or legal-claims evidence may be retained where genuinely required.

Ask admin@amplioai.co.uk for access, correction, deletion or export. We will explain what was deleted, what must be retained, and any provider-specific timing that applies.

You may have rights to access, correction, erasure, restriction, objection and portability, and to complain to the Information Commissioner's Office. We may need to verify your identity. Where processing is necessary for a contract or legal obligation, withdrawal of consent does not apply in the same way.

Necessary cookies support authentication and security. Analytics events must contain only event and product identifiers—not questionnaire answers or generated text. Non-essential cookies require an appropriate preference mechanism before use.

The only non-essential cookies we use are those set by Google Analytics and Google Ads conversion tracking. A banner asks before anything optional is loaded, and declining leaves no Google code loaded at all. Your choice is stored in your browser, and you may change your cookie choice at any time — declining later stops the tag loading on your next page view.

We also use Vercel Web Analytics to count page views. It is not covered by the banner because it sets no cookies and stores nothing on your device, so it does not rely on your consent to non-essential cookies; we rely on our legitimate interest in understanding how the site is used. It records the page visited, the referring site, a coarse country and a device, browser and operating-system class, and derives a short-lived visitor count from request data without retaining your IP address. It never receives your questionnaire answers, your generated documents, your email address or your payment details. Where a link contains a security token — a password-reset link, for example — the token is removed before the page view is sent. Declining non-essential cookies stops the Google tags but does not stop this cookieless page-view counting.

The owner must keep the configured Supabase region, AI-provider retention and training settings, subprocessors, transfer safeguards, backup and log retention, analytics consent, and the operational deletion process under review. A London primary database must not be used as evidence that every processor or transfer is UK-only.